Sampling with sample pacing

ABSTRACT

A plurality of samples is generated in a computer to profile and record a plurality of events associated with the computer. For each of the plurality of samples, a plurality of partial samples is accumulated prior to occurrence of each of the plurality of events. In addition, a processor may process a current sample of the plurality of samples in response to (i) a completion of a previous sample of the plurality of samples and (ii) a predetermined threshold quantity of partial samples being accumulated. Embodiments of the invention include methods, systems and computer program products.

BACKGROUND

1. Field

This disclosure generally relates to a computing environment. More particularly, the disclosure relates to sampling technology.

2. General Background

Either time-based or hardware event-based sampling technology is typically utilized in application profiling tools to determine the specific usage of resources. The sampling technology samples by periodically generating interrupts. At each interrupt the current process/thread, the instruction being executed and, optionally, the data address being accessed, may be identified and recorded. At a later time the collected data is aggregated, and reports are generated showing sample distribution by address, symbol, process, etc. The full execution context of the sample is not typically recorded and not available in reports.

SUMMARY

Embodiments of the invention include a computer program product and a method for causing a computer system to generate a plurality of samples in the computer system to profile and record a plurality of events associated with the computer system, accumulate, for each of the plurality of samples, a plurality of partial samples prior to occurrence of each of the plurality of events, and process a current sample of the plurality of samples in response to (i) a completion of a previous sample of the plurality of samples and (ii) a predetermined threshold quantity of partial samples being accumulated.

In another embodiment of the invention, a system includes a data storage device that accumulates, for each of a plurality of samples, a plurality of partial samples prior to the occurrence of each of a plurality of events. Further, the system includes a processor that (i) generates a plurality of samples in a computer system to profile and record a plurality of events associated with the computer system and (ii) processes a current sample of the plurality of samples in response to a completion of a previous sample of the plurality of samples and a predetermined threshold quantity of partial samples being accumulated.

In another embodiment of the invention, a computer program product is provided to generate a plurality of samples to profile and record a plurality of events, to accumulate, for each of the plurality of samples, a plurality of partial samples prior to occurrence of each of the plurality of events, and to process a current sample of the plurality of samples in response to (i) a completion of a previous sample of the plurality of samples and (ii) a predetermined threshold quantity of partial samples being accumulated, the previous sample having a predetermined previous sample rate, the current sample having a predetermined current sample rate that is determined by increasing the previous sample rate by a factor such that the predetermined current sample rate is greater than the predetermined previous sample rate.

DRAWINGS

The above-mentioned features of the present invention will become more apparent with reference to the following description taken in conjunction with the accompanying drawings wherein like reference numerals denote like elements and in which:

FIG. 1 illustrates a sampling system 100 according to an embodiment of the present invention.

FIG. 2 illustrates a process 200 that may be utilized to sample a call stack and prevent thread migration according to an embodiment of the present invention.

FIG. 3 illustrates a process 300 that may be utilized to utilize at least one signal to avoid forward progress when getting an interrupt driven call stack according to an embodiment of the present invention.

FIG. 4 illustrates a process 400 that suspends a thread until its processor affinity may be set to avoid forward progress when getting a call stack according to an embodiment of the present invention.

FIG. 5 illustrates a process 500 that may be utilized to profile static and dynamic code according to an embodiment of the present invention.

FIG. 6 illustrates a block diagram of a system 600 that prevents thread migration according to an embodiment of the present invention.

DETAILED DESCRIPTION

According to an embodiment of the present invention, a sampling configuration is provided that determines why a processor is being utilized in a particular manner. In one embodiment, a call stack is gathered at each sample. As a result, a determination may be made as to how functions were called in contrast with a profiler that is typically utilized to provide sample distribution reports of recorded addresses of instructions being executed during samples and is unable to make such a determination. Further, a determination may be made as to what was the call stack that was utilized to invoke a particular function. Such a determination may help an analyst determine if a problem exists with how a particular function is being invoked, what calling sequence is being utilized the most frequently, and whether the calling sequence is necessary. In one embodiment, a report may be generated to show the different ways in which a function was called.

In gathering calls stacks for interrupted threads, there is a migration issue. That is, while the call stacks are gathered, the thread may have migrated to a different processor. It is possible to prevent thread migration by keeping all processors busy, other than the one on which the call stack will be gathered. This could be accomplished by having sampler threads spin on those processors, until the call stack is obtained for the thread of interest. However, this severely affects overall application performance. Instead, the thread of interest may be prevented from migrating to a different processor, by setting its affinity to restrict it to only running on one processor. In this way, the other processors do not have to be spun so that the other processors are free to continue running the application. Thus there is minimal application performance degradation. To reiterate, thread migration is prevented by setting the processor affinity of the interrupted/target thread to allow it to run only on the current processor.

After the call stack is retrieved the interrupted/target thread's original affinity is restored. Setting a thread's affinity, sometimes also known as binding, causes the thread to run only on the specified processor(s). Because the sampler thread runs at high priority and on the same processor on which the interrupted thread is intended to run, the interrupted thread may not migrate to a different processor.

As samples are processed, the kernel mode component 120 handling the interrupt may be able to set the interrupted thread's affinity immediately within the interrupt handler. In one embodiment, setting the affinity may occur outside the interrupt handler when interrupts are enabled. For example, a second level interrupt handler (“SLIH”) or an interrupt back-end may perform this action. While handling the samples, e.g., interrupts, the interrupted thread may not make forward progress until the SLIH or the interrupt back-end has completed its processing, which would include scheduling the sampling thread(s) for the interrupted process.

In an alternative embodiment, all user-mode sampler threads, one for each processor, may spin until the interrupted threads' affinity is set. This method could be used if the operating system's support for binding or setting a thread's affinity is only supported from user mode. In another embodiment, the target thread is suspended either in the interrupt handler or in an interrupt back-end. Once the sampler thread gets control, it will set the target thread's affinity and resume (i.e., un-suspend) it. In yet another embodiment, the profiler installs a global signal handler for the application being profiled. At interrupt time, the interrupt handler signals the target thread using a predefined signal, which causes the signal handler to run in the context of the target thread. The signal handler then sets the processor affinity of the target thread, in which context it is executing, to the current processor. Subsequently, the signal handler signals the sampler thread on the current processor. The sampler runs after the signal handler signals the sampler thread.

In any of these embodiments it is advantageous to guarantee that a certain amount of time or number of events have been reached after a sample has been completed before the next sample is processed. In other words, event processing is paced. An accounting for time during the sampling is provided. The quantity of the sample can be determined, which allows for the time of the sample to be determined. As a result, call stack sampling for a fixed range may be ensured.

In one embodiment, a sample rate is increased by a factor. Further, a sample is only processed after a predetermined threshold is reached. For example, the predetermined threshold may be a number of events. There could be separate factors for different profiling needs, for example, different factors for a profiling program and sample call stack events.

FIG. 1 illustrates a sampling system 100 according to an embodiment of the present invention. The sampling system 100 includes a user mode component 118 that has an application 102 that interacts with a profiler 104 that profiles the application 102. The profiler 104 interacts with an operating system 106, which includes a kernel mode component 120. The kernel mode component 120 may include an interrupt handler 110. The kernel component 120 may also be a kernel extension. Further, the kernel component 120 may be a part of a device driver installed in the sampling system 100. The device driver extends the functionality of the kernel component 120. The location of the code and the calling sequence that led to the code being there is determined.

Sampler threads are listening for commands to cause them to retrieve the call stack or a thread of interest, which is performed by the profiler 104. A sampler thread is a profiler thread. Many sampler threads may be utilized as a plurality of processors may be utilized. Each sampler thread has an affinity to a single processor. Sampler threads may be very high priority threads so that they run immediately when signaled to do work such as retrieving a target thread's call stack. The target thread is the thread that has the call stack of interest to be obtained. Further, a target processor is the processor on which the target thread was running and on which affinity is set so that the target thread remains on that processor for a duration.

Once a determination is made as a result of sampling, a target thread's call stack is to be obtained. The target thread is prevented from making any forward progress during that time. In other words, the target thread is kept where it is until the call stack is gathered. Afterward, the target thread may resume.

In a multi-processor environment, an issue arises in gathering calls stacks. That is, since call stacks are gathered by profiler sampler threads, the target thread could potentially be running on another available processor, i.e., a different processor than the target processor. By the time the sampler thread gathers the call stack, the target thread may no longer be at the point where it was sampled, and the call stack would not accurately reflect where the target thread was at the time of the sample. It would be possible to address this issue by boxing out all of the processors other than the target processor, i.e. giving all the other processors busy work that is not useful to make them spin so that they do not have the sampler thread. However, this tends to significantly hinder application performance. So instead, the set of processors on which the target thread may run is restricted to the target processor, according to an embodiment of the present invention. In this way, the remaining processors may continue to do real work. Only the target processor is affected while the target thread's call stack is being retrieved. The affinity is set so that the target thread may run only on the one processor to which it has affinity. Once the target's call stack is obtained, the target thread's affinity is restored and the target thread may run on any available processor again.

The sampling system 100 may have a plurality of processors. For example, the sampling system 100 may have a first processor 112, a second processor 114, . . . , and an nth processor 116. Only one thread may run on each processor at a given time. However, that thread may potentially run on a different processor and at a different time. In the sampling system 100, at least one processor generates an interrupt. In one embodiment, a sample may be driven by an interrupt. In one embodiment, the sample is based on an event. For example, the event may be time based so that the sample is generated at a constant rate for predetermined time intervals. Accordingly, each of the processors may generate an interrupt at a constant rate irrespective of the status of each of the processors, e.g., being idle or not being idle. The interrupt for each processor is generated by hardware and handled by an interrupt handler 110, which determines if the interrupted thread is one for which a call stack should be obtained. The interrupt handler 110 initiates the gathering of call stacks. Further, the interrupt handler may notify or signal a profiler sampler thread. To avoid thread migration during sampling, the affinity of a thread to a particular processor may be established.

If the threshold for the desired profiling is not reached, then no further processing for that function occurs. For example, if the profiling program tick rate has been increased by a factor of two and the sample call stack rate has been increase by a factor of eight, then the profiling processing will occur at every second interrupt. However, because sample call stack processing has an indeterminate amount of processing time to retrieve the call stack, the process ensures that 8 interrupts occur after the last sample completes before processing the next sample. This approach can be applied to other sampling events, such as monitoring processor idle events. In that case, after a call stack has been processed related to a processor detected being idle, a new sample call stack will not be initiated until after some fixed amount of events has completed.

In one embodiment, a previous sample has a predetermined previous sample rate. An example is a standard sample rate for call stack sampling of, thirty two samples per second and a profiling rate of one hundred twenty eight samples per second. Further, in one embodiment, a current sample may have a predetermined current sample rate. An example of a predetermined current sample rate is a sample rate that is distinct from the predetermined previous sample rate. In one embodiment, the current sample has a predetermined current sample rate that is determined by increasing the previous sample rate by a factor such that the predetermined current sample rate is greater than the predetermined previous sample rate. For instance, the factor may be a multiple such as eight so that the predetermined current sample rate is eight times the predetermined previous sample rate, e.g., thirty two samples per second times the factor of eight to result in two hundred fifty six interrupts per second, but only when eight interrupts are taken In one embodiment, the predetermined threshold quantity is the factor. In the exampled provided, the predetermined threshold quantity may be eight as the predetermined threshold quantity is the factor. Further, a counter that is incremented or decremented may be utilized for the predetermined threshold quantity. As a result, a paced sample that is paced from the completion of the previous sample is processed. Assuming a decrement, the profiling counter starts at two and is decrement on each tick till zero is reached. When zero is reached, the trace record is written and the profiling counter is set back to two. In the case of call stack sampling, the counter is set to eight and decremented on each sample and a new sample is taken when the counter is zero. When the call stack is retrieved and a sample is completed, partial tick counts are accumulated and the counter is set to eight. In this example, the profiling trace record is written every second interrupt, but the sample call stack sampler thread is only notified after at least eight interrupts after the completion of the previous sample has occurred.

Logic, which may be provided through hardware and/or software, may indicate the completion of the previous sample. A sampler thread may not be notified for a predetermined threshold quantity before receiving control to retrieve the call stack. After retrieving and processing the call stack, the sampler thread notifies the device driver indicating completion of the previous sample. A component processing the sample, e.g., a processor, then indicates to a portion of code that controls the sampling that the operation has been completed. In one embodiment, the completion resets a counter. After the completion, the partial accumulations may be added. Profiling may also be run concurrently so that the two tools may be run simultaneously.

In one embodiment, the accounting is performed by a processor. The interrupt handler 110 may have separate divisors for tracing and call stack sampling. As an example, on the interrupt, a “temp_tick_count” is decremented and only if the value is 0 does processing continue. Further, at sample completion, the following code may be utilized:

  // The number of little or high granularity ticks since the last sample tick // is the specified tick divisor (ScsDivisor) minus the current tick count // since the tick count is decremented on each tick delta = ScsDivisor − temp_scs_tick_count; accum_scs_temp_tick_count + = delta; temp_scs_tick_count = ScsDivisor; // Set to restart count down busy_handling_sample = 0; // No longer processing sample return; When selecting a process to notify, called by the interrupt handler when the temp_scs_tick_count reaches zero, the following code may be utilized:

   // Outstanding sample?  if (busy_handling_sample) {  // Outstanding sample ...  // Means sampler is still working on the last notification we sent  // a sampler on this CPU.  sampler_busy = 1;  } else {  // No outstanding sample ...  // Check if any sampler (in any JVM) is busy on this CPU  sampler_busy = any_sampler_busy( );  delta_ticks = accum_scs_temp_tick_count −  last_accum_scs_temp_tick_count;  // Since sampling is not actually “in-process,” we can accumulate  // any partial ticks.  if (delta_ticks >= ScsDivisor) {   extra_ticks = delta_ticks % ScsDivisor;   busy_adjust = delta_ticks / ScsDivisor;   last_accum_scs_temp_tick_count =   accum_scs_temp_tick_count − extra_ticks;  } The busy_adjust count may then be added to the process statistics.

The any_sampler_busy routine checks if the interrupted thread is a sampler thread for any of the processes being monitored. The check may only be for sampler threads that are bound to the interrupted processor.

In another embodiment, a component such as an interrupt back-end worker, offlevel processing worker, interrupt backend worker, or the like may be utilized as only some things may be done at the interrupt level, and the rest of the work is deferred until a subsequent time.

The profiler 104 may retrieve the call stack, i.e., the execution context. Further, the profiler 104 may restore the affinity.

FIG. 2 illustrates a process 200 that may be utilized to sample a call stack and prevent thread migration according to an embodiment of the present invention. At a process block 202, the process 200 generates an interrupt based on an event. Further, at a process block 204, the process 200 captures information, with an interrupt handler, for an interrupted thread on a current processor. The information may include the thread id (“TID”), process id (“PID”), kernel-mode and user-mode instruction pointer, and/or stack pointer. In addition, at a process block 206, the process 200 sets an affinity of the interrupted thread such that the interrupted thread runs only on the current processor without being able to migrate to a different processor. At a process block 208, the process 200 retrieves, with a sampler thread that runs on the current processor, a call stack associated with the interrupted thread after the affinity of the interrupted thread has been set to the current processor. Further, at a process block 210, the process 200 restores the affinity of the interrupted thread after the call stack has been retrieved. The call stack may be recorded in the form of a report.

In one embodiment, the call stack sampling tool contains a kernel mode component 120 and a user mode component 118 that work together. In one configuration, the underlying operating system 106 provides application program interfaces (“APIs”) that allow setting a thread's affinity from kernel-mode. The user mode component 118 creates a high priority sampling thread for each processor and sets its affinity to only that processor. Each sampler thread is responsible for gathering call stacks for one interrupted thread that was running in that processor. Each sampler thread waits for notification from the kernel mode component. The kernel mode component 110 enables the sampling, e.g., interrupt mechanism. Interrupts will occur on each processor at a predetermined rate. The interrupt handler 110 handles the sampling interrupts. For example, the interrupt handler 110 may perform the following: (1) collect the interrupted thread's information, e.g., thread id, process id, user-mode and kernel-mode instruction and stack pointers, etc.); (2) set the interrupted thread's affinity to only the processor on which it is running, e.g., the interrupted processor; (3) notify the user-mode sampler thread to collect the call stack; and (4) indicate that no more samples will be handled on this processor until the user-mode sampler thread completes. Further, the user-mode sampler thread wakes up and performs the following: (1) utilizes a virtual machine tools interface to obtain the interrupted thread's call stack or walks the interrupted thread's call stack directly; (2) restores the original interrupted thread's affinity to allow for the operating system 106 as seen in FIG. 1 to schedule the interrupted thread on any available processor; (3) save call stack and thread information; (4) notify kernel mode component 120 that processing had completed; The kernel mode component accumulates any monitored partial samples and updates any monitored partial sample counters to indicate that the threshold accounting must restart to ensure the desired number of events occur before the next sample is taken and (5) wait for the next kernel-mode notification. In addition, the kernel mode component 120 resets the sampling mechanism and waits for the next interrupt to continue with the kernel mode component 120 handling the sampling interrupts. As a result, setting a thread's affinity is a very fast and lightweight operation and the need to spin threads on other processors for the length of time it takes to collect the interrupted thread's call stack is eliminated. Accordingly, those other processors are free to perform useful work.

In another configuration, the underlying operating system 106 as seen in FIG. 1 is assumed not to provide APIs that allow setting a thread's affinity from kernel-mode. The user mode component 118 creates a high priority sampling thread for each processor and sets its affinity to only that processor. Each sampler thread is responsible for gathering call stacks for the interrupted thread that was running on that processor. Each sampler thread waits for notification from the kernel mode component. Further, the kernel mode component 120 sets the sampling, e.g., interrupt, mechanism. Interrupts will occur on each processor at a predetermined rate. In addition, the kernel mode component 120 handles the sampling interrupts. The kernel mode component 120 collects the interrupted thread's information, e.g., thread id, process id, user-mode and kernel-mode instruction and stack pointers, etc. Further, the kernel mode component 120 notifies all user-mode sampler threads to wake up, but assigns the responsibility for collecting the call stack to only those samplers running on processors on which an interrupted thread has been identified to have its call stack retrieved. The kernel mode component 120 indicates that no more samples will be handled on this processor until the user-mode sampler thread completes. All user-mode sampler threads wake up and the ones which were not responsible for collecting a call stack go into a spin loop to wait for the samplers tasked with collecting a call stack to set their interrupted threads' affinity whereas the samplers with work to do, i.e., tasked with collecting call stacks set the interrupted thread's affinity to only the processor on which it was running, e.g., the interrupted processor, and join the spin until all interrupted threads have had their affinity changed. Once all interrupted threads have had their affinity changed, samplers which were not tasked with collecting a call stack stop spinning and go back to waiting for kernel-mode notification. Further, samplers tasked with collecting a call stack continue processing. In addition, samplers either request the interrupted thread's call stack utilizing virtual machine tools interface application programming interfaces (“APIs”) or retrieve the interrupted thread's call stack directly. The original interrupted thread's affinity is restored, which allows the operating system 106 to schedule the interrupted thread on any available processor. Further, the call stack and thread information is saved. The kernel mode component 120 is notified that processing has completed. Samplers go back to waiting for the next kernel-mode notification. The kernel mode component 120 resets the sampling mechanism and waits for the next interrupt to continue with the kernel mode component 120 handling the sampling interrupts. As a result, setting a thread's affinity is a very fast and lightweight operation and the length of time during which sampler threads on other processors need to spin is significantly reduced. The time is reduced from the length of time it takes to collect the interrupted thread's call stack to the length of time needed to set affinity of the interrupted threads. Once affinity is set, the spinning processors are free to perform useful work.

Variations of the configurations provided herein may be utilized to allow for collecting the call stacks asynchronously. Instead of making a synchronous call to a virtual machine tools interface to collect the call stack, a sampler would request that the call stack be collected for the interrupted thread asynchronously, e.g., by setting a notification flag, at the next convenient time, and then wait for a notification from the virtual machine when the request is completed. At that time, the sampler would restore the interrupted thread's affinity. Because collecting a call stack may be a lengthy operation, once the request is made to the virtual machine to collect the call stack, the sampler would yield the processor. The interrupted thread will not migrate away from that processor. In order to get the call stack from the interrupted thread as soon as possible, after setting the notification flag, the sampler thread could increase the priority of the interrupted thread and block. When the notification occurs, the profiler 104 would retrieve and process the call stack and before restore the thread's original priority.

FIG. 3 illustrates a process 300 that may be utilized to avoid forward progress when getting an interrupt driven call stack according to an embodiment of the present invention. At a process block 302, the process 300 generates an interrupt based on an event. Further, at a process block 304, the process 300 captures information, with an interrupt handler, for an interrupted thread. In addition, at a process block 306, the process 300 sends a signal to the interrupted thread. At a process block 308, the process 300 binds, with a signal handler, the interrupted thread to the current processor. Further, at a process block 310, the process 300 sends a signal to a sampler thread that runs on the current processor. In addition, at a process block 312, the process 300 retrieves, with the sampler thread, a call stack associated with the interrupted thread after the binding of the interrupted thread has been set to the current processor. At a process block 314, the process 300 restores the binding of the interrupted thread after the call stack has been retrieved.

In one embodiment, the signal handler is installed when the processing is registered for call stack sampling and its sampler threads are allocated. After the hardware is set up to generate one or more interrupts for the requested events, the interrupt is signaled and the interrupt handler handles the interrupt. The interrupt handler then signals the interrupted thread, which may be effectuated by an SLIH or an interrupt back-end as long as they occur on the same processor as the interrupting processor. The signal handler is then executed before the interrupted thread is allowed to resume normal execution. The signal handler may then perform various actions to cause the interrupted thread to be bound to the processor and allow the sampler thread to retrieve the call stack. In one embodiment, the signal handler binds (i.e., sets the affinity of the interrupted thread to the processor on which it was interrupted and then signals the sampler thread for that processor to get the interrupted thread's call stack). Because the signal handler may run on any processor, care must be taken to make sure the interrupted thread is bound to the correct processor, not necessarily the one on which the signal handler is running. In one embodiment, the interrupt handler maintains a per-processor entry containing the interrupted thread identifier. The signal handler searches the processor entry for its thread id and binds the thread to that processor. Other variations may be utilized.

When the sampler thread has determined that the interrupted thread is bound to the interrupted process, the sampler thread then requests or gets the call stack. In one embodiment, the sampler thread may set the affinity or know that the affinity was set by the signal handler.

With respect to native call stacks, one approach is to have the monitored application link with a library that supports the registration of monitoring and the installation of a signal handler. Alternatively, support may be added dynamically for an interrupted process using a mechanism similar to the process debuggers use to attach to an already running program. Although this may not be possible on the first interrupt, a daemon process may be scheduled to initiate the attachment in an expedited manner for subsequent interrupts against that process to be handled via this disclosed method.

FIG. 4 illustrates a process 400 that suspends a thread until its processor affinity may be set to reduce forward progress when getting a call stack according to an embodiment of the present invention. At a process block 402, the process 400 generates an interrupt based on an event. Further, at a process block 404, the process 400 captures information, with an interrupt handler, for an interrupted thread on a current processor. In addition, at a process block 406, the process 400 suspends, with the interrupt handler, the interrupted thread. At a process block 408, the process 400 activates a sampler thread that runs on the current processor. In addition, at a process block 410, the process 400 binds, with the sampler thread, the interrupted thread to the processor. The sampler thread may perform the binding by utilizing available APIs and/or operating system services. At a process block 412, the process 400 resumes, with the sampler thread, the interrupted thread after the binding. Further, at a process block 414, the process 400 retrieves, with the sampler thread, a call stack for the interrupted thread after the binding. In addition, at a process block 416, the process 400 restores the binding of the interrupted thread after the call stack has been retrieved.

When the call stack is retrieved, various actions may take place. In one embodiment, the retrieved call stack is walked into a tree and the leaf node of the tree has its base count incremented, which allows for utilization of the technology to produce reports or to view the collected information. After processing the call stack, the kernel mode component is notified and the kernel mode component accumulates any monitored partial samples and updates any monitored partial sample counters to indicate that the threshold accounting must restart to ensure the desired number of events occur before the next sample is taken

In yet another embodiment, profiling static and dynamic code may be utilized. FIG. 5 illustrates a process 500 that may be utilized to profile static and dynamic code according to an embodiment of the present invention. At a process block 502, the process 500 utilizes the profiler 104 to register events that identify load addresses and lengths for generated code. As an example, a virtual machine tool interface event may identify a load address and length of the generated code. Further, at a process block 504, the process 500 registers the event to support call stack sampling. In addition, at a process block 506, the process 500 associates, upon receipt of the event by the profiler 104, data received with the generated code identified in the event. At a process block 508, the profiler 104 processes the data by recording the most recent data with the generated code identified in the event. In an alternative embodiment, the profiler 104 may associate the data utilizing a Last In First Out (“LIFO”) queue to give priority to the most recently generated code.

In another embodiment, the data recorded by the profiler 104 is handed to a component handling Address to Name (“A2N”) resolution. The component may have specialized support for code that is generated dynamically and may be overlaid.

After retrieving a call stack, the sampler thread determines if the instruction pointer received from the interrupt handler falls within the address for the function being executed at the leaf node of a tree. If the instruction pointer falls within the leaf node, the sampler thread indicates that the target thread did not drift (I.e., execute instructions) since the time the target thread was interrupted. If the instruction pointer does not fall within the leaf function, the target thread drifted since the time the target thread was interrupted. The target thread was interrupted at the address given by the instruction pointer. However, that address is not within the function being executed as indicated by the retrieved call stack. In other words, the target thread is not where it was interrupted and has drifted. The sampler inspects other functions near the leaf node. In other words, the functions that appear in the tree as immediate callers of the leaf functions (i.e., functions that directly call the leaf function or functions directly called by the leaf function.) The functions that directly call the leaf function are callers, and the functions that are directly called by the leaf function are callees. If the instruction pointer is resolved to either a caller or a callee then the exact location of the drifted target thread may be determined. Accordingly, corrections may be made in the tree by incrementing the occurrence counts in the actual caller or callee node, which is where the target thread was actually interrupted. If the instruction pointer is not resolved to either a caller or a callee, then the occurrence count on the leaf node is increment because that is the location of the target thread regardless of where the target thread was interrupted.

Subsequently, a report regarding the address range match is generated. While generating the report, the address ranges are converted to symbols. The conversion is performed by identifying functions in the address range and utilizing the A2N component to retrieve start addresses and lengths. When the report is generated, the A2N information is utilized to identify function names. In addition, names that are added to the reports are also determined along with identifying which leaves bases should be incremented to reflect an accurate picture of the call stack samples.

Accordingly, static and dynamic code is profiled utilizing the data collected by a device driver and data gathered for generated code. The profiling determines if an instruction address range collected by the device driver falls within the range of the generated code as specified by a virtual machine. This data may be utilized to determine the name of a routine that was executing at the time of an interrupt.

Further, in one embodiment, the address change is resolved in real time. Therefore, dynamic code may also be accounted for during post processing. Similarly, static code may be profiled utilizing a real time analysis

FIG. 6 illustrates a process 600 that is utilized with a computer system to pace processing of events. At a process block 602, the process 600 generates a plurality of samples in a computer system to profile and record a plurality of events associated with the computer system. Further, at a process block 604, the process 600 accumulates, for each of the plurality of samples, a plurality of partial samples prior to occurrence of each of the plurality of events. In addition, at a process block 606, the process processes, with a processor, a current sample of the plurality of samples in response to (i) a completion of a previous sample of the plurality of samples and (ii) a predetermined threshold quantity of partial samples being accumulated.

In one embodiment, each of the plurality of events is based on predetermined events. An example of a predetermined event is an event that is time based. The time based event may generate an interrupt.

In an alternative embodiment, the values of the counters when the sample is completed are collected. In one configuration, the values are collected when the values of the counters are sent to initialize for the new event.

The processes described herein may be implemented in a general, multi-purpose or single purpose processor. Such a processor will execute instructions, either at the assembly, compiled or machine-level, to perform the processes. Those instructions can be written by one of ordinary skill in the art following the description of the figures corresponding to the processes and stored or transmitted on a computer readable medium. The instructions may also be created using source code or any other known computer-aided design tool.

FIG. 7 illustrates a block diagram of a system 700 that prevents thread migration according to an embodiment of the present invention. In one embodiment, the system 700 is suitable for storing and/or executing program code and is implemented using a general purpose computer or any other hardware equivalents. Thus, the system 600 comprises a processor 702, a memory 712, e.g., random access memory (“RAM”) and/or read only memory (“ROM”), the profiler 104, and various input/output devices 704.

The processor 702 is coupled, either directly or indirectly, to the memory 712 through a system bus. The memory 712 may include local memory employed during actual execution of the program code, bulk storage, and/or cache memories which provide temporary storage of at least some program code in order to reduce the number of times code must be retrieved from bulk storage during execution.

The input/output devices 704 may be coupled directly to the system 700 or through intervening input/output controllers. Further, the input/output devices 704 may include a keyboard, a keypad, a mouse, a microphone for capturing speech commands, a pointing device, and other user input devices that will be recognized by one of ordinary skill in the art. Further, the input/output devices 704 may include a receiver, transmitter, speaker, display, image capture sensor, biometric sensor, etc. In addition, the input/output devices 604 may include storage devices such as a tape drive, floppy drive, hard disk drive, compact disk (“CD”) drive, digital video disk (“DVD”) drive, etc.

Network adapters may also be coupled to the system 900 to enable the system 900 to become coupled to other systems, remote printers, or storage devices through intervening private or public networks. Modems, cable modems, and Ethernet cards are just a few of the currently available types of network adapters.

For any of the configurations described herein, various actions may take place when the call stack is retrieved. In one embodiment, the retrieved call stack is walked into a tree and the leaf node of the tree has its base count incremented, which allows for utilization of technology to produce reports or to view the collected information.

Any of the configurations described herein may be utilized with a virtual machine. A virtual machine may be configured to keep track of calling state and return that state referring to a virtual machine supported interface to return call stacks. For instance, information about execution of threads may be obtained through trace data. This information may include call stack information obtained from call stacks associated with threads of interest. A virtual machine may be utilized to obtain the call stack information. Various approaches may be utilized by the virtual machine to obtain the call stack information. For example, entry/exit events, an application timer tick, or instrumenting codes that sample the instrumented values may be utilized. A selected sampling thread may send a call to the virtual machine to obtain the call stack information. The selected sampling thread may make the call to the virtual machine through a virtual machine interface. The virtual machine interfaces may return call stack information to the sampling thread or may store the call stack information in some work area. The obtained information may be placed into a tree for later analysis.

As will be appreciated by one skilled in the art, aspects of the present invention may be embodied as a system, method, or computer program product. Accordingly, aspects of the present invention may take the form of an entirely hardware embodiment, an entirely software embodiment (including firmware, resident software, micro-code, etc.) or an embodiment combining software and hardware aspects that may all generally be referred to herein as a “circuit,” “module” or “system.” Furthermore, aspects of the present invention may take the form of a computer program product embodied in one or more computer readable medium(s) having computer readable program code embodied thereon.

Any combination of one or more computer readable medium(s) may be utilized. The computer readable medium may be a computer readable signal medium or a computer readable storage medium. A computer readable storage medium may be, for example, but not limited to, an electronic, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, or device, or any suitable combination of the foregoing. More specific examples (a non-exhaustive list) of the computer readable storage medium would include the following: an electrical connection having one or more wires, a portable computer diskette, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or Flash memory), an optical fiber, a portable compact disc read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing. In the context of this document, a computer readable storage medium may be any tangible medium that may contain, or store a program for use by or in connection with an instruction execution system, apparatus, or device.

A computer readable signal medium may include a propagated data signal with computer readable program code embodied therein, for example, in baseband or as part of a carrier wave. Such a propagated signal may take any of a variety of forms, including, but not limited to, electro-magnetic, optical, or any suitable combination thereof. A computer readable signal medium may be any computer readable medium that is not a computer readable storage medium and that may communicate, propagate, or transport a program for use by or in connection with an instruction execution system, apparatus, or device.

Program code embodied on a computer readable medium may be transmitted using any appropriate medium, including but not limited to wireless, wireline, optical fiber cable, RF, etc., or any suitable combination of the foregoing.

Computer program code for carrying out operations for aspects of the present invention may be written in any combination of one or more programming languages, including an object oriented programming language such as Java, Smalltalk, C++ or the like and conventional procedural programming languages, such as the “C” programming language or similar programming languages. The program code may execute entirely on the user's computer, partly on the user's computer, as a stand-alone software package, partly on the user's computer and partly on a remote computer or entirely on the remote computer or server. In the latter scenario, the remote computer may be connected to the user's computer through any type of network, including a local area network (“LAN”) or a wide area network (“WAN”), or the connection may be made to an external computer (for example, through the Internet using an Internet Service Provider).

Aspects of the present invention are described below with reference to flowchart illustrations and/or block diagrams of methods, apparatus (systems) and computer program products according to embodiments of the invention. It will be understood that each block of the flowchart illustrations and/or block diagrams, and combinations of blocks in the flowchart illustrations and/or block diagrams, may be implemented by computer program instructions. These computer program instructions may be provided to a processor of a general purpose computer, special purpose computer, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, create means for implementing the functions/acts specified in the flowchart and/or block diagram block or blocks.

The “processor” of a general purpose computer, special purpose computer, or other programmable data processing apparatus may be referred to herein as a “microprocessor.” However, the term “microprocessor” should not be interpreted as being limited to a single-chip central processing unit or any other particular type of programmable data processing apparatus, unless explicitly so stated.

These computer program instructions may also be stored in a computer readable medium that may direct a computer, other programmable data processing apparatus, or other devices to function in a particular manner, such that the instructions stored in the computer readable medium produce an article of manufacture including instructions which implement the function/act specified in the flowchart and/or block diagram block or blocks. The computer program instructions may also be loaded onto a computer, other programmable data processing apparatus, or other devices to cause a series of operational steps to be performed on the computer, other programmable apparatus or other devices to produce a computer implemented process such that the instructions which execute on the computer or other programmable apparatus provide processes for implementing the functions/acts specified in the flowchart and/or block diagram block or blocks.

The flowchart and block diagrams in the Figures illustrate the architecture, functionality, and operation of possible implementations of systems, methods and computer program products according to various embodiments of the present invention. In this regard, each block in the flowchart or block diagrams may represent a module, segment, or portion of code, which comprises one or more executable instructions for implementing the specified logical function(s). It should also be noted that, in some alternative implementations, the functions noted in the block may occur out of the order noted in the figures. For example, two blocks shown in succession may, in fact, be executed substantially concurrently, or the blocks may sometimes be executed in the reverse order, depending upon the functionality involved. It will also be noted that each block of the block diagrams and/or flowchart illustration, and combinations of blocks in the block diagrams and/or flowchart illustration, may be implemented by special purpose hardware-based systems that perform the specified functions or acts, or combinations of special purpose hardware and computer instructions.

Reference throughout this Specification to “one embodiment,” “an embodiment,” or similar language means that a particular feature, structure, or characteristic described in connection with the embodiment is included in at least one embodiment of the present invention. Thus, appearances of the phrase “in one embodiment,” “in an embodiment,” and similar language throughout this Specification may, but do not necessarily, all refer to the same embodiment. Furthermore, the described features, structures, or characteristics of the invention may be combined in any suitable manner in one or more embodiments. Correspondingly, even if features are initially claimed as acting in certain combinations, one or more features from a claimed combination may in some cases be excised from the combination, and the claimed combination may be directed to a subcombination or variation of a subcombination.

While the computer program product, method and system have been described in terms of what are presently considered to be the most practical and preferred embodiments, it is to be understood that the disclosure need not be limited to the disclosed embodiments. The disclosure is intended to cover various modifications and similar arrangements included within the spirit and scope of the claims, the scope of which should be accorded the broadest interpretation so as to encompass all such modifications and similar structures. The present disclosure includes any and all embodiments of the following claims. 

1. A computer program product for sampling, the computer program product comprising: a computer readable storage medium having computer readable program code embodied therewith, the computer readable program code comprising: computer readable program code to generate a plurality of samples in the computer system to profile and record a plurality of events associated with the computer system; computer readable program code to accumulate, for each of the plurality of samples, a plurality of partial samples prior to occurrence of each of the plurality of events; and computer readable program code to process, a current sample of the plurality of samples in response to (i) a completion of a previous sample of the plurality of samples and (ii) a predetermined threshold quantity of partial samples being accumulated.
 2. The computer program product of claim 1, wherein each of the plurality of events is based on predetermined events.
 3. The computer program product of claim 2, wherein the predetermined events are time based.
 4. The computer program product of claim 1, wherein the predetermined events are based on hardware counters interrupts
 5. The computer program product of claim 1, further comprising computer readable program code to utilize a plurality of predetermined previous sample rates.
 6. The computer program product of claim 5, further comprising computer readable program code to determine a predetermined current sample rate for the current sample by increasing the previous sample rate by a factor such that the predetermined current sample rate is greater than the predetermined previous sample rate, the predetermined threshold quantity being the factor.
 7. The computer program product of claim 1, further comprising computer readable program code to generate process statistics that include busy time.
 8. A method comprising: generating a plurality of samples in a computer system to profile and record a plurality of events associated with the computer system; accumulating, for each of the plurality of samples, a plurality of partial samples prior to occurrence of each of the plurality of events; processing, a current sample of the plurality of samples in response to (i) a completion of a previous sample of the plurality of samples and (ii) a predetermined threshold quantity of partial samples being accumulated.
 9. The method of claim 8, wherein each of the plurality of events is based on predetermined events.
 10. The method of claim 9, wherein the predetermined events are time based.
 11. The method of claim 8, wherein the predetermined events are based on hardware counters.
 12. The method of claim 8, wherein a plurality of predetermined previous sample rates is utilized.
 13. The method of claim 12, wherein the current sample has a predetermined current sample rate that is determined by increasing the previous sample rate by a factor such that the predetermined current sample rate is greater than the predetermined previous sample rate, the predetermined threshold quantity being the factor.
 14. The method of claim 13, wherein the computer is further caused to generate process statistics that include busy time.
 15. A system comprising: a data storage device that accumulates, for each of a plurality of samples, a plurality of partial samples prior to occurrence of each of a plurality of events; and a processor that (i) generates the plurality of samples in a computer system to profile and record the plurality of events associated with the computer system and (ii) processes a current sample of the plurality of samples in response to a completion of a previous sample of the plurality of samples and a predetermined threshold quantity of partial samples being accumulated.
 16. The system of claim 15, wherein each of the plurality of events is based on predetermined events.
 17. The system of claim 16, wherein the predetermined events are time based.
 18. The system of claim 15, wherein the predetermined events are based on interrupts.
 19. The system of claim 15, wherein the previous sample has a predetermined previous sample rate.
 20. The system of claim 19, wherein the current sample has a predetermined current sample rate that is determined by increasing the previous sample rate by a factor such that the predetermined current sample rate is greater than the predetermined previous sample rate.
 21. The system of claim 20, wherein the data storage device is a memory.
 22. A computer program product for sampling, the computer program product comprising: a computer readable storage medium having computer readable program code embodied therewith, the computer readable program code comprising: computer readable program code to generate a plurality of samples to profile and record a plurality of events; computer readable program code to accumulate, for each of the plurality of samples, a plurality of partial samples prior to occurrence of each of the plurality of events; and computer readable program code to process, a current sample of the plurality of samples in response to (i) a completion of a previous sample of the plurality of samples and (ii) a predetermined threshold quantity of partial samples being accumulated, the previous sample having a predetermined previous sample rate, the current sample having a predetermined current sample rate that is determined by increasing the previous sample rate by a factor such that the predetermined current sample rate is greater than the predetermined previous sample rate.
 23. The computer program product of claim 22, wherein the event is based on a predetermined event.
 24. The computer program product of claim 23, wherein the predetermined event is time based.
 25. The computer program product of claim 22, wherein the event is based on an interrupt. 